Ubiquiti Inc Edgemax Edgeswitch vulnerabilities

3 CVEs affecting Ubiquiti Inc Edgemax Edgeswitch, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-77532, published 2026-08-26.

More from Ubiquiti Inc.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2025-48978, published 2025-08-21. High severity, CVSS 7.5. EPSS: 0.7% chance of exploitation in the next 30 days. An Improper Input Validation in EdgeMAX EdgeSwitch (Version 1.11.0 and earlier) could allow a Command Injection by a malicious actor with access to EdgeSwitch adjacent network. Affected…
• CVE-2025-27211, published 2025-08-04. High severity, CVSS 7.5. EPSS: 0.6% chance of exploitation in the next 30 days. An Improper Input Validation in EdgeMAX EdgeSwitch (Version 1.10.4 and earlier) could allow a Command Injection by a malicious actor with access to EdgeSwitch adjacent network.
• CVE-2026-77532, published 2026-08-26. High severity, CVSS 8.8. EPSS: 0.3% chance of exploitation in the next 30 days. A malicious actor with access to an adjacent network could exploit a Buffer Overflow vulnerability found in a DHCPv6-enabled EdgeMAX EdgeSwitch to initiate a Remote Code Execution on such device.